EUVD-2026-81622

SiYuan versions before 3.8.4 fail to escape bookmark labels imported from notebook files when rendering them in the dock tree. Attackers can craft malicious .sy notebook files with unescaped HTML in bookmark attributes that execute scripts in the Electron renderer with access to childprocess for...

Malicious code in key-tree-cron-serialize-process (npm)

Source: amazon-inspector 5ff78953ae8c70b79b3faaea4d21dacd0a7182c0942619a5916fe974dfedf448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

CVE-2026-93045: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject arena frees below the arena base bpfarenafreepages accepts scalar arena addresses. The runtime masks the address to the low 32 bits and reconstructs a full user address from the arena base before returning the range t...

CVE-2026-90260: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: don't clobber the extent buffer when zeroing it out On a zoned filesystem a freed-but-still-dirty tree block is written out as zeros EXTENTBUFFERZONEDZEROOUT only to keep the zone write pointer advancing...

CVE-2026-69197: Exposure of Sensitive Information to an Unauthorized Actor

Umbraco is an ASP.NET CMS. Prior to 13.15.1, 17.5.3, and 18.0.2, the Content Delivery API applies member and Public Access checks to the directly requested node but not to referenced nodes serialized through Content Picker or Multi-Node Tree Picker properties, including pickers nested in Block...

CVE-2026-92986: Improper Neutralization of Input During Web Page Generation

SiYuan before 3.8.4 renders document titles as HTML in the backlink dock tree without escaping markup characters. Attackers can set malicious titles through the rename API or crafted notebooks to execute scripts in the Electron renderer with access to childprocess for command execution...

CVE-2026-92985: Improper Neutralization of Input During Web Page Generation

SiYuan versions before 3.8.4 fail to escape bookmark labels imported from notebook files when rendering them in the dock tree. Attackers can craft malicious .sy notebook files with unescaped HTML in bookmark attributes that execute scripts in the Electron renderer with access to childprocess for...

PT-2026-94458

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The inetpeer rate limiting system uses a Red-Black tree to store peer entries keyed deterministically by remote IP address. Since lookups use standard lexicographical comparisons via the...

PT-2026-94561

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the firewire core component. In the error path of the build tree function, node instances may remain in the local linked list upon function return. This occurs wh...

PT-2026-94380

Name of the Vulnerable Software and Affected Versions Umbraco versions prior to 13.15.1 Umbraco versions prior to 17.5.3 Umbraco versions prior to 18.0.2 Description The Content Delivery API fails to apply member and Public Access checks to referenced nodes serialized through Content Picker or...

PT-2026-94883

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the system fails to properly reject out-of-range Device Tree DT protocol IDs. While the DT parsing paths identify protocol IDs th...

PT-2026-94608

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the btrfs zoned filesystem where a freed-but-still-dirty tree block is written as zeros to maintain the zone write pointer. The btree csum one bio function previously...

PT-2026-94688

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the pinctrl generic subsystem when the pinctrl generic to map function fails. The function parses Device Tree DT configuration and allocates pinctrl maps using...

PT-2026-94433

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the rvu dbg nix tm tree display function. This occurs when the function accesses pfvf-sq ctx without verifying if the SQ context has been allocated...

PT-2026-94359

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.4 Description The software renders document titles as HTML in the backlink dock tree without escaping markup characters. This allows attackers to set malicious titles via the rename API or crafted notebooks to...

CVE-2026-90110: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: inetpeer: randomize RB-tree node comparison using SipHash The inetpeer rate limiting system stores peer entries in a Red-Black tree keyed deterministically on the remote IP address. Because tree lookups walk the RB-tree using...

PT-2026-94514

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference occurs in the ksmbd ipc tree connect request function. This happens when ksmbd share config get fails during a kstrdup operation for share-name and the KSMBD...

PT-2026-94610

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the btrfs filesystem where the btrfs read merkle tree page function may identify a folio in the mapping that is not uptodate. The system incorrectly treats this state ...

PT-2026-94884

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the scmi cleanup channels function iterates through TX/RX channel IDRs using idr for each to free transport resources and destroy...

CVE-2026-89982 i2c: mux: Fix channel node leak on adapter add failure

In the Linux kernel, the following vulnerability has been resolved: i2c: mux: Fix channel node leak on adapter add failure i2cmuxaddadapter takes a reference to the Device Tree channel node before registering the new adapter. If adapter registration fails, the error path frees the private data...